Suricata Uninstalled on Updates?

[Lurick]

Waited 30 minutes after upgrade today and still no install :(

[SteveITS]

@Lurick I don't know if this is helpful but if WAN wasn't connected, or IPv6, or DNS, or something, the package (re)install might try and fail. Though, I'd think that would affect all packages.

Usually I follow the upgrade guide and uninstall at least "big" packages like Suricata and pfBlocker, though I leave things like OpenVPN export or System Patches for the system to reinstall.

Have you upgraded to the 23.09 beta that was released this weekend?

[bmeeks]

@Lurick said in Suricata Uninstalled on Updates?:

Waited 30 minutes after upgrade today and still no install :(

Hmmm... I don't know. As I said, I do not currently have a Plus snapshot testing environment and thus cannot check that out.

I would assume there are some other Suricata users running the devel snapshots, though. If it is a generic pfSense Plus issue I would expect additional complaints from other users to be showing up.

I do now recall why pfSense automatically removes and reinstalls the packages. It was in response to an old issue where with certain operating system updates you needed to install the packages that were compiled under the new OS kernel version. It's a long story, but there were scenarios where the package itself needed no updates, so its version remained the same. But the OS did get an update and some of the shared libraries used by a package may have changed. In that instance, the package would need recompiling with the new shared library. A forced-remove and reinstall of packages was then needed in those cases to pull in the package compiled with the new OS kernel and shared libraries, otherwise the existing package installation would fail to start properly with the new shared library after the OS update.

This forced remove and reinstall is technically only really needed if the underlying OS version in pfSense is updated (that is, a new kernel version is included). Some pfSense update that only provides fixes in PHP code, for example, would not need the forced remove and reinstall. But maybe for simplicity the team decided to do the package forced update for all pfSense updates ???

[Lurick]

@SteveITS Interesting, WAN is definitely connected although I've got a Dual Stack environment but never had issues going from say 23.01 to 23.05 or 23.05 to 23.05.01 either. I just installed the latest build from this morning and same issue sadly. I did also upgrade to the beta released this weekend as well but no change.

[Lurick]

@bmeeks @SteveITS
I spun up a fresh VM and installed Suricata and a few packages with no config and then updated to 23.09 beta from 23.05.01 and saw the same issue :(
It looks like, if I'm reading the logs right, it queues up Suricata for reinstall but never does it after the upgrade.

Spoiler

>>> Updating repositories metadata...
Updating pfSense-core repository catalogue...
Fetching meta.conf: . done
Fetching packagesite.pkg: . done
Processing entries: . done
pfSense-core repository update completed. 5 packages processed.
Updating pfSense repository catalogue...
Fetching meta.conf: . done
Fetching packagesite.pkg: ..... done
Processing entries:
Processing entries............. done
pfSense repository update completed. 725 packages processed.
All repositories are up to date.

Creating automatic rollback boot environment... done.
Scheduling package pfSense-pkg-suricata for removal...
Scheduling package suricata for removal...
Scheduling package pfSense-pkg-suricata for removal...
Removing vital flag from php82... done.
Downloading upgrade packages...
Updating pfSense-core repository catalogue...
Fetching meta.conf:
pfSense-core repository is up to date.
Updating pfSense repository catalogue...
Fetching meta.conf:
pfSense repository is up to date.
All repositories are up to date.
Checking for upgrades (110 candidates): .......... done
Processing candidates (110 candidates): .......... done
The following 125 package(s) will be affected (of 0 checked):

New packages to be INSTALLED:
boost-libs: 1.82.0_1 [pfSense]
dhcpcd: 10.0.2 [pfSense]
dhcpleases6: 0.1_3 [pfSense]
frr9: 9.0.1 [pfSense]
frr9-pythontools: 9.0.1 [pfSense]
kea: 2.4.0 [pfSense]
libunwind: 20211201_2 [pfSense]
libyang2: 2.1.80 [pfSense]
log4cplus: 2.1.0 [pfSense]
pfSense-composer-deps: 0.1 [pfSense]
php82-gmp: 8.2.11 [pfSense]
protobuf: 3.21.12,1 [pfSense]
protobuf-c: 1.4.1_1 [pfSense]
py311-libzfs: 1.1.2023020700 [pfSense]
py311-yaml: 6.0 [pfSense]

Installed packages to be UPGRADED:
bind-tools: 9.18.13 -> 9.18.16 [pfSense]
c-ares: 1.19.0 -> 1.19.1 [pfSense]
ca_root_nss: 3.89 -> 3.92 [pfSense]
curl: 8.0.1 -> 8.4.0 [pfSense]
cyrus-sasl: 2.1.28 -> 2.1.28_1 [pfSense]
devcpu-data: 20230219 -> 20230617_1 [pfSense]
devcpu-data-amd: 20230219 -> 20230724 [pfSense]
devcpu-data-intel: 20230214 -> 20230808 [pfSense]
filterlog: 0.1_9 -> 0.1_10 [pfSense]
freetype2: 2.12.1_2 -> 2.13.1 [pfSense]
gettext-runtime: 0.21.1 -> 0.22_1 [pfSense]
glib: 2.76.1,2 -> 2.76.4,2 [pfSense]
gmp: 6.2.1 -> 6.3.0 [pfSense]
gnugrep: 3.10 -> 3.11 [pfSense]
icu: 72.1,1 -> 73.2,1 [pfSense]
igmpproxy: 0.3_1,1 -> 0.4,1 [pfSense]
isc-dhcp44-relay: 4.4.3P1 -> 4.4.3P1_3 [pfSense]
isc-dhcp44-server: 4.4.3P1 -> 4.4.3P1_3 [pfSense]
jpeg-turbo: 2.1.5.1 -> 3.0.0 [pfSense]
libgcrypt: 1.9.4_1 -> 1.10.2 [pfSense]
libgd: 2.3.3_5,1 -> 2.3.3_6,1 [pfSense]
libgpg-error: 1.46 -> 1.47 [pfSense]
libnghttp2: 1.52.0 -> 1.55.1_1 [pfSense]
libpcap: 1.10.3 -> 1.10.4 [pfSense]
libpsl: 0.21.2_2 -> 0.21.2_3 [pfSense]
libssh: 0.10.4 -> 0.10.5 [pfSense]
libssh2: 1.10.0_1,3 -> 1.11.0_1,3 [pfSense]
libuv: 1.44.2 -> 1.46.0 [pfSense]
libxml2: 2.10.3_1 -> 2.10.4 [pfSense]
lighttpd: 1.4.69_1 -> 1.4.71 [pfSense]
links: 2.28,1 -> 2.29_1,1 [pfSense]
lua-resty-core: 0.1.24 -> 0.1.27 [pfSense]
lua54: 5.4.4 -> 5.4.6 [pfSense]
luajit-openresty: 2.1.20230119 -> 2.1.20230410 [pfSense]
miniupnpd: 2.2.1_1,1 -> 2.3.3_1,1 [pfSense]
mobile-broadband-provider-info: 20221107 -> 20230416 [pfSense]
mpd5: 5.9_14 -> 5.9_16 [pfSense]
net-snmp: 5.9.1_3,1 -> 5.9.1_4,1 [pfSense]
nettle: 3.8.1 -> 3.9.1 [pfSense]
nginx: 1.22.1_5,3 -> 1.24.0_11,3 [pfSense]
nss: 3.89 -> 3.92 [pfSense]
ntp: 4.2.8p15_5 -> 4.2.8p17_1 [pfSense]
nut: 2.8.0_22 -> 2.8.0_23 [pfSense]
open-vm-tools-nox11: 12.2.0,2 -> 12.2.5_2,2 [pfSense]
openldap26-client: 2.6.4 -> 2.6.6 [pfSense]
openvpn: 2.6.2 -> 2.6.5 [pfSense]
pcsc-lite: 1.9.9,2 -> 2.0.0,2 [pfSense]
perl5: 5.32.1_3 -> 5.34.1_3 [pfSense]
pfSense: 23.05.1 -> 23.09.b.20231019.0337 [pfSense]
pfSense-base: 23.05.1 -> 23.09.b.20231019.0337 [pfSense-core]
pfSense-boot: 23.05.1 -> 23.09.b.20231019.0337 [pfSense-core]
pfSense-default-config: 23.05.1 -> 23.09.b.20231019.0337 [pfSense]
pfSense-kernel-pfSense: 23.05.1 -> 23.09.b.20231019.0337 [pfSense-core]
pfSense-pkg-WireGuard: 0.2.0_2 -> 0.2.1 [pfSense]
pfSense-pkg-frr: 1.3_1 -> 2.0.2 [pfSense]
pfSense-pkg-ipsec-profile-wizard: 1.1_1 -> 1.2 [pfSense]
pfSense-pkg-suricata: 6.0.13 -> 7.0.0_2 [pfSense]
pfSense-repo: 23.05.1 -> 23.09.b.20231019.0337 [pfSense]
pftop: 0.8_2 -> 0.8_4 [pfSense]
php82: 8.2.4 -> 8.2.11 [pfSense]
php82-bcmath: 8.2.4 -> 8.2.11 [pfSense]
php82-bz2: 8.2.4 -> 8.2.11 [pfSense]
php82-ctype: 8.2.4 -> 8.2.11 [pfSense]
php82-curl: 8.2.4 -> 8.2.11 [pfSense]
php82-dom: 8.2.4 -> 8.2.11 [pfSense]
php82-filter: 8.2.4 -> 8.2.11 [pfSense]
php82-gettext: 8.2.4 -> 8.2.11 [pfSense]
php82-intl: 8.2.4_1 -> 8.2.11 [pfSense]
php82-ldap: 8.2.4 -> 8.2.11 [pfSense]
php82-mbstring: 8.2.4 -> 8.2.11 [pfSense]
php82-opcache: 8.2.4 -> 8.2.11 [pfSense]
php82-openssl_x509_crl: 1.3_2 -> 1.3_3 [pfSense]
php82-pcntl: 8.2.4 -> 8.2.11 [pfSense]
php82-pdo: 8.2.4 -> 8.2.11 [pfSense]
php82-pdo_sqlite: 8.2.4 -> 8.2.11 [pfSense]
php82-pear-Mail: 1.4.1,1 -> 1.5.0,1 [pfSense]
php82-posix: 8.2.4 -> 8.2.11 [pfSense]
php82-readline: 8.2.4 -> 8.2.11 [pfSense]
php82-session: 8.2.4 -> 8.2.11 [pfSense]
php82-shmop: 8.2.4 -> 8.2.11 [pfSense]
php82-simplexml: 8.2.4 -> 8.2.11 [pfSense]
php82-sockets: 8.2.4 -> 8.2.11 [pfSense]
php82-sqlite3: 8.2.4 -> 8.2.11 [pfSense]
php82-sysvmsg: 8.2.4 -> 8.2.11 [pfSense]
php82-sysvsem: 8.2.4 -> 8.2.11 [pfSense]
php82-sysvshm: 8.2.4 -> 8.2.11 [pfSense]
php82-tokenizer: 8.2.4 -> 8.2.11 [pfSense]
php82-xml: 8.2.4 -> 8.2.11 [pfSense]
php82-xmlreader: 8.2.4 -> 8.2.11 [pfSense]
php82-xmlwriter: 8.2.4 -> 8.2.11 [pfSense]
php82-zlib: 8.2.4 -> 8.2.11 [pfSense]
png: 1.6.39 -> 1.6.40 [pfSense]
py311-maxminddb: 2.2.0_1 -> 2.4.0 [pfSense]
py311-setuptools: 63.1.0 -> 63.1.0_1 [pfSense]
py311-sqlite3: 3.11.2_8 -> 3.11.4_8 [pfSense]
py39-setuptools: 63.1.0 -> 63.1.0_1 [pfSense]
python311: 3.11.2_2 -> 3.11.4 [pfSense]
python39: 3.9.16_2 -> 3.9.17 [pfSense]
smartmontools: 7.3 -> 7.4 [pfSense]
sqlite3: 3.41.0_1,1 -> 3.42.0,1 [pfSense]
strongswan: 5.9.10_2 -> 5.9.11_1 [pfSense]
suricata: 6.0.13 -> 7.0.0 [pfSense]
tiff: 4.4.0_1 -> 4.4.0_2 [pfSense]
uclcmd: 0.1_3 -> 0.2.20211204 [pfSense]
unbound: 1.17.1_3 -> 1.18.0 [pfSense]
voucher: 0.1_2 -> 0.1_3 [pfSense]
webp: 1.3.0 -> 1.3.1_1 [pfSense]
xxhash: 0.8.1_2 -> 0.8.2 [pfSense]
zstd: 1.5.4_1 -> 1.5.5 [pfSense]

Installed packages to be REINSTALLED:
rrdtool-1.8.0_2 [pfSense] (direct dependency changed: perl5)

Number of packages to be installed: 15
Number of packages to be upgraded: 109
Number of packages to be reinstalled: 1

The process will require 300 MiB more space.
333 MiB to be downloaded.
[1/125] Fetching net-snmp-5.9.1_4,1.pkg: ........ done
[2/125] Fetching png-1.6.40.pkg: ... done
[3/125] Fetching py311-sqlite3-3.11.4_8.pkg: . done
[4/125] Fetching unbound-1.18.0.pkg: . done
[5/125] Fetching nut-2.8.0_23.pkg: .. done
[6/125] Fetching php82-session-8.2.11.pkg: . done
[7/125] Fetching nginx-1.24.0_11,3.pkg: . done
[8/125] Fetching libssh-0.10.5.pkg: . done
[9/125] Fetching pfSense-base-23.09.b.20231019.0337.pkg: .......... done
[10/125] Fetching filterlog-0.1_10.pkg: . done
[11/125] Fetching jpeg-turbo-3.0.0.pkg: ....... done
[12/125] Fetching freetype2-2.13.1.pkg: .... done
[13/125] Fetching lighttpd-1.4.71.pkg: . done
[14/125] Fetching php82-gmp-8.2.11.pkg: . done
[15/125] Fetching devcpu-data-20230617_1.pkg: . done
[16/125] Fetching pfSense-pkg-frr-2.0.2.pkg: . done
[17/125] Fetching libuv-1.46.0.pkg: .. done
[18/125] Fetching boost-libs-1.82.0_1.pkg: .......... done
[19/125] Fetching gnugrep-3.11.pkg: . done
[20/125] Fetching uclcmd-0.2.20211204.pkg: . done
[21/125] Fetching nettle-3.9.1.pkg: .... done
[22/125] Fetching lua54-5.4.6.pkg: ... done
[23/125] Fetching nss-3.92.pkg: ..... done
[24/125] Fetching php82-zlib-8.2.11.pkg: .. done
[25/125] Fetching php82-dom-8.2.11.pkg: . done
[26/125] Fetching php82-simplexml-8.2.11.pkg: . done
[27/125] Fetching pfSense-pkg-WireGuard-0.2.1.pkg: . done
[28/125] Fetching devcpu-data-amd-20230724.pkg: . done
[29/125] Fetching php82-shmop-8.2.11.pkg: . done
[30/125] Fetching lua-resty-core-0.1.27.pkg: .. done
[31/125] Fetching pcsc-lite-2.0.0,2.pkg: . done
[32/125] Fetching py311-setuptools-63.1.0_1.pkg: ... done
[33/125] Fetching pfSense-pkg-suricata-7.0.0_2.pkg: . done
[34/125] Fetching openvpn-2.6.5.pkg: ......... done
[35/125] Fetching php82-pdo-8.2.11.pkg: . done
[36/125] Fetching libnghttp2-1.55.1_1.pkg: . done
[37/125] Fetching libxml2-2.10.4.pkg: ..... done
[38/125] Fetching open-vm-tools-nox11-12.2.5_2,2.pkg: . done
[39/125] Fetching php82-readline-8.2.11.pkg: . done
[40/125] Fetching php82-curl-8.2.11.pkg: . done
[41/125] Fetching libgd-2.3.3_6,1.pkg: . done
[42/125] Fetching python39-3.9.17.pkg: .......... done
[43/125] Fetching icu-73.2,1.pkg: .......... done
[44/125] Fetching pfSense-default-config-23.09.b.20231019.0337.pkg: . done
[45/125] Fetching bind-tools-9.18.16.pkg: .... done
[46/125] Fetching libyang2-2.1.80.pkg: .. done
[47/125] Fetching rrdtool-1.8.0_2.pkg: . done
[48/125] Fetching pfSense-23.09.b.20231019.0337.pkg: .......... done
[49/125] Fetching php82-mbstring-8.2.11.pkg: ... done
[50/125] Fetching isc-dhcp44-server-4.4.3P1_3.pkg: ...... done
[51/125] Fetching php82-tokenizer-8.2.11.pkg: . done
[52/125] Fetching ntp-4.2.8p17_1.pkg: .. done
[53/125] Fetching frr9-pythontools-9.0.1.pkg: . done
[54/125] Fetching webp-1.3.1_1.pkg: ......... done
[55/125] Fetching xxhash-0.8.2.pkg: . done
[56/125] Fetching libpsl-0.21.2_3.pkg: . done
[57/125] Fetching voucher-0.1_3.pkg: . done
[58/125] Fetching protobuf-c-1.4.1_1.pkg: .. done
[59/125] Fetching libpcap-1.10.4.pkg: .. done
[60/125] Fetching php82-ldap-8.2.11.pkg: . done
[61/125] Fetching pfSense-boot-23.09.b.20231019.0337.pkg: ......... done
[62/125] Fetching miniupnpd-2.3.3_1,1.pkg: ... done
[63/125] Fetching ca_root_nss-3.92.pkg: ..... done
[64/125] Fetching python311-3.11.4.pkg: .......... done
[65/125] Fetching links-2.29_1,1.pkg: .. done
[66/125] Fetching pfSense-repo-23.09.b.20231019.0337.pkg: . done
[67/125] Fetching frr9-9.0.1.pkg: ........ done
[68/125] Fetching php82-sysvmsg-8.2.11.pkg: . done
[69/125] Fetching pfSense-pkg-ipsec-profile-wizard-1.2.pkg: . done
[70/125] Fetching kea-2.4.0.pkg: .......... done
[71/125] Fetching dhcpcd-10.0.2.pkg: ... done
[72/125] Fetching pfSense-composer-deps-0.1.pkg: . done
[73/125] Fetching mobile-broadband-provider-info-20230416.pkg: . done
[74/125] Fetching php82-posix-8.2.11.pkg: . done
[75/125] Fetching libgcrypt-1.10.2.pkg: .. done
[76/125] Fetching dhcpleases6-0.1_3.pkg: . done
[77/125] Fetching php82-sockets-8.2.11.pkg: . done
[78/125] Fetching php82-8.2.11.pkg: .......... done
[79/125] Fetching php82-sqlite3-8.2.11.pkg: . done
[80/125] Fetching pfSense-kernel-pfSense-23.09.b.20231019.0337.pkg: .......... done
[81/125] Fetching libunwind-20211201_2.pkg: .... done
[82/125] Fetching zstd-1.5.5.pkg: .......... done
[83/125] Fetching php82-xmlreader-8.2.11.pkg: . done
[84/125] Fetching log4cplus-2.1.0.pkg: ........ done
[85/125] Fetching php82-pcntl-8.2.11.pkg: . done
[86/125] Fetching php82-xml-8.2.11.pkg: . done
[87/125] Fetching libgpg-error-1.47.pkg: . done
[88/125] Fetching curl-8.4.0.pkg: ...... done
[89/125] Fetching gmp-6.3.0.pkg: ... done
[90/125] Fetching igmpproxy-0.4,1.pkg: . done
[91/125] Fetching gettext-runtime-0.22_1.pkg: . done
[92/125] Fetching py311-yaml-6.0.pkg: . done
[93/125] Fetching php82-intl-8.2.11.pkg: . done
[94/125] Fetching php82-bcmath-8.2.11.pkg: . done
[95/125] Fetching php82-bz2-8.2.11.pkg: . done
[96/125] Fetching py39-setuptools-63.1.0_1.pkg: ... done
[97/125] Fetching cyrus-sasl-2.1.28_1.pkg: . done
[98/125] Fetching php82-openssl_x509_crl-1.3_3.pkg: . done
[99/125] Fetching c-ares-1.19.1.pkg: . done
[100/125] Fetching php82-sysvshm-8.2.11.pkg: . done
[101/125] Fetching php82-xmlwriter-8.2.11.pkg: . done
[102/125] Fetching suricata-7.0.0.pkg: .......... done
[103/125] Fetching mpd5-5.9_16.pkg: . done
[104/125] Fetching sqlite3-3.42.0,1.pkg: ....... done
[105/125] Fetching php82-gettext-8.2.11.pkg: . done
[106/125] Fetching openldap26-client-2.6.6.pkg: . done
[107/125] Fetching protobuf-3.21.12,1.pkg: .......... done
[108/125] Fetching glib-2.76.4,2.pkg: .......... done
[109/125] Fetching devcpu-data-intel-20230808.pkg: .......... done
[110/125] Fetching luajit-openresty-2.1.20230410.pkg: ........ done
[111/125] Fetching perl5-5.34.1_3.pkg: .......... done
[112/125] Fetching strongswan-5.9.11_1.pkg: ........ done
[113/125] Fetching php82-sysvsem-8.2.11.pkg: . done
[114/125] Fetching php82-pear-Mail-1.5.0,1.pkg: . done
[115/125] Fetching php82-ctype-8.2.11.pkg: . done
[116/125] Fetching smartmontools-7.4.pkg: . done
[117/125] Fetching libssh2-1.11.0_1,3.pkg: . done
[118/125] Fetching tiff-4.4.0_2.pkg: . done
[119/125] Fetching isc-dhcp44-relay-4.4.3P1_3.pkg: .. done
[120/125] Fetching php82-opcache-8.2.11.pkg: . done
[121/125] Fetching pftop-0.8_4.pkg: .. done
[122/125] Fetching php82-filter-8.2.11.pkg: . done
[123/125] Fetching py311-libzfs-1.1.2023020700.pkg: ......... done
[124/125] Fetching py311-maxminddb-2.4.0.pkg: . done
[125/125] Fetching php82-pdo_sqlite-8.2.11.pkg: . done
Checking integrity... done (3 conflicting)

• libyang2-2.1.80 [pfSense] conflicts with libyang-1.0.240 [installed] on /usr/local/bin/yanglint
• pfSense-23.09.b.20231019.0337 [pfSense] conflicts with pfSense-rc-23.05.1 [installed] on /etc/pfSense-rc
• frr9-9.0.1 [pfSense] conflicts with frr7-7.5.1_4 [installed] on /usr/local/bin/vtysh
  Checking integrity... done (0 conflicting)
  Conflicts with the existing packages have been found.
  One more solver iteration is needed to resolve them.
  The following 129 package(s) will be affected (of 0 checked):

Installed packages to be REMOVED:
frr7: 7.5.1_4
frr7-pythontools: 7.5.1_4
libyang: 1.0.240
pfSense-rc: 23.05.1

New packages to be INSTALLED:
boost-libs: 1.82.0_1 [pfSense]
dhcpcd: 10.0.2 [pfSense]
dhcpleases6: 0.1_3 [pfSense]
frr9: 9.0.1 [pfSense]
frr9-pythontools: 9.0.1 [pfSense]
kea: 2.4.0 [pfSense]
libunwind: 20211201_2 [pfSense]
libyang2: 2.1.80 [pfSense]
log4cplus: 2.1.0 [pfSense]
pfSense-composer-deps: 0.1 [pfSense]
php82-gmp: 8.2.11 [pfSense]
protobuf: 3.21.12,1 [pfSense]
protobuf-c: 1.4.1_1 [pfSense]
py311-libzfs: 1.1.2023020700 [pfSense]
py311-yaml: 6.0 [pfSense]

Installed packages to be UPGRADED:
bind-tools: 9.18.13 -> 9.18.16 [pfSense]
c-ares: 1.19.0 -> 1.19.1 [pfSense]
ca_root_nss: 3.89 -> 3.92 [pfSense]
curl: 8.0.1 -> 8.4.0 [pfSense]
cyrus-sasl: 2.1.28 -> 2.1.28_1 [pfSense]
devcpu-data: 20230219 -> 20230617_1 [pfSense]
devcpu-data-amd: 20230219 -> 20230724 [pfSense]
devcpu-data-intel: 20230214 -> 20230808 [pfSense]
filterlog: 0.1_9 -> 0.1_10 [pfSense]
freetype2: 2.12.1_2 -> 2.13.1 [pfSense]
gettext-runtime: 0.21.1 -> 0.22_1 [pfSense]
glib: 2.76.1,2 -> 2.76.4,2 [pfSense]
gmp: 6.2.1 -> 6.3.0 [pfSense]
gnugrep: 3.10 -> 3.11 [pfSense]
icu: 72.1,1 -> 73.2,1 [pfSense]
igmpproxy: 0.3_1,1 -> 0.4,1 [pfSense]
isc-dhcp44-relay: 4.4.3P1 -> 4.4.3P1_3 [pfSense]
isc-dhcp44-server: 4.4.3P1 -> 4.4.3P1_3 [pfSense]
jpeg-turbo: 2.1.5.1 -> 3.0.0 [pfSense]
libgcrypt: 1.9.4_1 -> 1.10.2 [pfSense]
libgd: 2.3.3_5,1 -> 2.3.3_6,1 [pfSense]
libgpg-error: 1.46 -> 1.47 [pfSense]
libnghttp2: 1.52.0 -> 1.55.1_1 [pfSense]
libpcap: 1.10.3 -> 1.10.4 [pfSense]
libpsl: 0.21.2_2 -> 0.21.2_3 [pfSense]
libssh: 0.10.4 -> 0.10.5 [pfSense]
libssh2: 1.10.0_1,3 -> 1.11.0_1,3 [pfSense]
libuv: 1.44.2 -> 1.46.0 [pfSense]
libxml2: 2.10.3_1 -> 2.10.4 [pfSense]
lighttpd: 1.4.69_1 -> 1.4.71 [pfSense]
links: 2.28,1 -> 2.29_1,1 [pfSense]
lua-resty-core: 0.1.24 -> 0.1.27 [pfSense]
lua54: 5.4.4 -> 5.4.6 [pfSense]
luajit-openresty: 2.1.20230119 -> 2.1.20230410 [pfSense]
miniupnpd: 2.2.1_1,1 -> 2.3.3_1,1 [pfSense]
mobile-broadband-provider-info: 20221107 -> 20230416 [pfSense]
mpd5: 5.9_14 -> 5.9_16 [pfSense]
net-snmp: 5.9.1_3,1 -> 5.9.1_4,1 [pfSense]
nettle: 3.8.1 -> 3.9.1 [pfSense]
nginx: 1.22.1_5,3 -> 1.24.0_11,3 [pfSense]
nss: 3.89 -> 3.92 [pfSense]
ntp: 4.2.8p15_5 -> 4.2.8p17_1 [pfSense]
nut: 2.8.0_22 -> 2.8.0_23 [pfSense]
open-vm-tools-nox11: 12.2.0,2 -> 12.2.5_2,2 [pfSense]
openldap26-client: 2.6.4 -> 2.6.6 [pfSense]
openvpn: 2.6.2 -> 2.6.5 [pfSense]
pcsc-lite: 1.9.9,2 -> 2.0.0,2 [pfSense]
perl5: 5.32.1_3 -> 5.34.1_3 [pfSense]
pfSense: 23.05.1 -> 23.09.b.20231019.0337 [pfSense]
pfSense-base: 23.05.1 -> 23.09.b.20231019.0337 [pfSense-core]
pfSense-boot: 23.05.1 -> 23.09.b.20231019.0337 [pfSense-core]
pfSense-default-config: 23.05.1 -> 23.09.b.20231019.0337 [pfSense]
pfSense-kernel-pfSense: 23.05.1 -> 23.09.b.20231019.0337 [pfSense-core]
pfSense-pkg-WireGuard: 0.2.0_2 -> 0.2.1 [pfSense]
pfSense-pkg-frr: 1.3_1 -> 2.0.2 [pfSense]
pfSense-pkg-ipsec-profile-wizard: 1.1_1 -> 1.2 [pfSense]
pfSense-pkg-suricata: 6.0.13 -> 7.0.0_2 [pfSense]
pfSense-repo: 23.05.1 -> 23.09.b.20231019.0337 [pfSense]
pftop: 0.8_2 -> 0.8_4 [pfSense]
php82: 8.2.4 -> 8.2.11 [pfSense]
php82-bcmath: 8.2.4 -> 8.2.11 [pfSense]
php82-bz2: 8.2.4 -> 8.2.11 [pfSense]
php82-ctype: 8.2.4 -> 8.2.11 [pfSense]
php82-curl: 8.2.4 -> 8.2.11 [pfSense]
php82-dom: 8.2.4 -> 8.2.11 [pfSense]
php82-filter: 8.2.4 -> 8.2.11 [pfSense]
php82-gettext: 8.2.4 -> 8.2.11 [pfSense]
php82-intl: 8.2.4_1 -> 8.2.11 [pfSense]
php82-ldap: 8.2.4 -> 8.2.11 [pfSense]
php82-mbstring: 8.2.4 -> 8.2.11 [pfSense]
php82-opcache: 8.2.4 -> 8.2.11 [pfSense]
php82-openssl_x509_crl: 1.3_2 -> 1.3_3 [pfSense]
php82-pcntl: 8.2.4 -> 8.2.11 [pfSense]
php82-pdo: 8.2.4 -> 8.2.11 [pfSense]
php82-pdo_sqlite: 8.2.4 -> 8.2.11 [pfSense]
php82-pear-Mail: 1.4.1,1 -> 1.5.0,1 [pfSense]
php82-posix: 8.2.4 -> 8.2.11 [pfSense]
php82-readline: 8.2.4 -> 8.2.11 [pfSense]
php82-session: 8.2.4 -> 8.2.11 [pfSense]
php82-shmop: 8.2.4 -> 8.2.11 [pfSense]
php82-simplexml: 8.2.4 -> 8.2.11 [pfSense]
php82-sockets: 8.2.4 -> 8.2.11 [pfSense]
php82-sqlite3: 8.2.4 -> 8.2.11 [pfSense]
php82-sysvmsg: 8.2.4 -> 8.2.11 [pfSense]
php82-sysvsem: 8.2.4 -> 8.2.11 [pfSense]
php82-sysvshm: 8.2.4 -> 8.2.11 [pfSense]
php82-tokenizer: 8.2.4 -> 8.2.11 [pfSense]
php82-xml: 8.2.4 -> 8.2.11 [pfSense]
php82-xmlreader: 8.2.4 -> 8.2.11 [pfSense]
php82-xmlwriter: 8.2.4 -> 8.2.11 [pfSense]
php82-zlib: 8.2.4 -> 8.2.11 [pfSense]
png: 1.6.39 -> 1.6.40 [pfSense]
py311-maxminddb: 2.2.0_1 -> 2.4.0 [pfSense]
py311-setuptools: 63.1.0 -> 63.1.0_1 [pfSense]
py311-sqlite3: 3.11.2_8 -> 3.11.4_8 [pfSense]
py39-setuptools: 63.1.0 -> 63.1.0_1 [pfSense]
python311: 3.11.2_2 -> 3.11.4 [pfSense]
python39: 3.9.16_2 -> 3.9.17 [pfSense]
smartmontools: 7.3 -> 7.4 [pfSense]
sqlite3: 3.41.0_1,1 -> 3.42.0,1 [pfSense]
strongswan: 5.9.10_2 -> 5.9.11_1 [pfSense]
suricata: 6.0.13 -> 7.0.0 [pfSense]
tiff: 4.4.0_1 -> 4.4.0_2 [pfSense]
uclcmd: 0.1_3 -> 0.2.20211204 [pfSense]
unbound: 1.17.1_3 -> 1.18.0 [pfSense]
voucher: 0.1_2 -> 0.1_3 [pfSense]
webp: 1.3.0 -> 1.3.1_1 [pfSense]
xxhash: 0.8.1_2 -> 0.8.2 [pfSense]
zstd: 1.5.4_1 -> 1.5.5 [pfSense]

Installed packages to be REINSTALLED:
rrdtool-1.8.0_2 [pfSense] (direct dependency changed: perl5)

Number of packages to be removed: 4
Number of packages to be installed: 15
Number of packages to be upgraded: 109
Number of packages to be reinstalled: 1

The process will require 288 MiB more space.

Downloading pkg...

No packages are required to be fetched.
Integrity check was successful.

Upgrading pfSense-boot...>>> Unmounting /boot/efi... done.

Updating pfSense-core repository catalogue...
Fetching meta.conf:
pfSense-core repository is up to date.
Updating pfSense repository catalogue...
Fetching meta.conf:
pfSense repository is up to date.
All repositories are up to date.
Checking integrity... done (0 conflicting)
The following 1 package(s) will be affected (of 0 checked):

Installed packages to be UPGRADED:
pfSense-boot: 23.05.1 -> 23.09.b.20231019.0337 [pfSense-core]

Number of packages to be upgraded: 1
[1/1] Upgrading pfSense-boot from 23.05.1 to 23.09.b.20231019.0337...
[1/1] Extracting pfSense-boot-23.09.b.20231019.0337: .......... done

Removing vital flag from pfSense-rc... done.
Upgrading pfSense kernel...
Checking integrity... done (0 conflicting)
The following 1 package(s) will be affected (of 0 checked):

Installed packages to be UPGRADED:
pfSense-kernel-pfSense: 23.05.1 -> 23.09.b.20231019.0337 [pfSense-core]

Number of packages to be upgraded: 1

The operation will free 123 MiB.
[1/1] Upgrading pfSense-kernel-pfSense from 23.05.1 to 23.09.b.20231019.0337...
[1/1] Extracting pfSense-kernel-pfSense-23.09.b.20231019.0337: .......... done
===> Keeping a copy of current kernel in /boot/kernel.old

Removing unnecessary packages... done.
Activating boot environment auto-default-20231019095135... done.
System is going to be upgraded. Rebooting in 10 seconds.
Success

[bmeeks]

@Lurick:
Does the FRR package get reinstalled but with the updated version? And is it fully functional after the pfSense upgrade completes?

As you noted, the Suricata package components are being flagged for upgrade/installation during the pfSense upgrade. I have no idea why the pfSense code would not proceed with the reinstall after rebooting from the pfSense OS upgrade. The Suricata package itself is out of the loop because it is not even installed at that point. This is all totally under the control of pfSense until Suricata is reinstalled.

Have you opened a Redmine ticket for this? That's the place to raise the issue to be sure the Netgate develolper team sees it. As I said, I do not have a pfSense Plus test environment, so I can't replicate/test/verify this behavior.

Here is a link to the Redmine site for pfSense: https://redmine.pfsense.org/projects/pfsense.

[Lurick]

@bmeeks Yah, FRR gets reinstalled properly.
Going to open a ticket on redmine now, thanks for reminding me :)

Edit:
Opened redmine bug:
https://redmine.pfsense.org/issues/14896

[bmeeks]

After looking around in the pfSense upgrade code, I found a spot where there might be a problem. But I'm not sure. That spot is in this function: https://github.com/pfsense/pfsense/blob/e67b20f4851d7754477c0cdead1c8ea37babde73/src/etc/inc/pkg-utils.inc#L1139.

It could be that the package name Suricata is storing for itself in config.xml is not getting properly recognized after the pfSense upgrade when the code is attempting to find and reinstall the previously installed packages.

[bmeeks]

This should now be fixed in the 23.09 RC build. The problem was a workaround put in place for a completely different issue with the pkg repo code, and that workaround happened to tickle something the wrong way in the Suricata package install code. That original bug was fixed and the workaround is no longer required. Thus it was removed and Suricata was verified to reinstall correctly according to the notes added to the Redmine ticket by Netgate. See the notes here: https://redmine.pfsense.org/issues/14896#change-70487.

[NollipfSense]

@bmeeks said in Suricata Uninstalled on Updates?:

This should now be fixed in the 23.09 RC build.

I recently upgraded two boxes to v23.09RC and both boxes Suricata package was the only one that was not reinstalled despite been in the configuration file...I had to install...just to share. Snort did though.

[Lurick]

@NollipfSense Yah, it's fixed in the 23.09 release build, just updated to it and no issues with Suricata staying :)